CVE-2019-11384

PoC —

CVSS 3.0

9.8 critical

EPSS

<1%p61

Published

Apr 22, 2019 (Apr 22, 2019)

Modified

Jun 17, 2026

Description

The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/shared_prefs/login_data.xml.

Vendors: zalora
Products: zalora
Weakness: CWE-312
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.